New data shows lack of API visibility, threat trends

Cloudflare’s global network sees on average 50 million HTTP requests per second, including tens of millions requests per second that are API calls. To help guide organisations’ API strategy in 2024 and beyond, we’ve just released our inaugural API Security and Management Report, which explores key trends in API errors, threats, mitigation techniques, and more.

For example, we’ve found:

• Many organisations lack full visibility into their APIs. Those “shadow APIs” can lead to data exposure, unpatched vulnerabilities, and other threats.
• Not all API errors (such as the 429 ‘too many requests’ error) are caused by attacks — and ‘misdiagnosing’ them can prevent legitimate transactions.
• Attackers are using multiple techniques to go after individual APIs. Without automated API protection, businesses can expect API risks and management complexity to increase - particularly with increased adoption of GenAI-based apps.

Get the report and benchmark the health of your API security and management.